npm & PyPI Package Release and Security Monitor
Paste any npm or PyPI project page URL and we watch the version, release history, maintainer list, and licence text on a schedule. When a release lands out of pattern, a new publisher appears, or a package is deprecated, you get an alert with the exact lines that changed, so your dependencies stop being something you only hear about second-hand.
npm & PyPI Package Release and Security Monitor
Watch any npm or PyPI project page and get alerted on new releases, maintainer changes, deprecations, and advisories
1Paste an npm or PyPI project page URL→
2We track the version, release date, maintainer list, and licence text→
3Get an alert when a release, ownership change, or deprecation notice lands
Use the package project page, not the tarball or the JSON endpoint. Advisory database views with a filter applied work too
Package and advisory pages worth tracking:
Our AI reads every change and only alerts you when this happens, so routine updates never reach your inbox. Edit it to fit what you care about.
On the next check after a change, or batched into one digest email.
Under 1 hour requires a paid plan
Frequently asked questions
Can it tell me when a new maintainer is added to a package?
Yes. The maintainer or owner list renders on the project page, so adding, removing, or transferring a publisher is a visible text change. Scope the monitor to that block and you get a very quiet alert that fires perhaps once a year on a stable package, which is exactly when you want to re-review it.
How is this different from a vulnerability scanner?
A scanner matches your installed versions against a vulnerability database, so it can only report what the database already describes. Watching the project page tells you a release, ownership change, or deprecation happened at publication time. Keep the scanner as your enforcement gate and use monitoring as the awareness layer above it.
How many packages should I monitor?
Twenty to fifty is the range where teams keep reading the alerts. Sort your direct dependencies by blast radius rather than download count, and prioritise anything with an install-time script or anything in your build, authentication, or cryptography path. Daily checks suit the long tail, with faster checks reserved for the critical few.
Monitor any web page for changes
PageCrawl watches any page and alerts you when a check finds something important changed. Set up your first monitor in under a minute.
Start free